Dekescordes/spacebar
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ban moderator schema actually change

Browse Source
This commit is contained in:
Erkin Alp Güney 2022-02-04 23:08:34 +03:00
parent add6b822a5
commit 2f30f5b100
1 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
api/src/routes/guilds/#guild_id/bans.ts
View File

@ -17,6 +17,14 @@ export interface BanRegistrySchema {
reason?: string | undefined; reason?: string | undefined;
}; };
export interface BanModeratorSchema {
id: string;
user_id: string;
guild_id: string;
executor_id: string;
reason?: string | undefined;
};
const router: Router = Router(); const router: Router = Router();
/* TODO: Deleting the secrets is just a temporary go-around. Views should be implemented for both safety and better handling. */ /* TODO: Deleting the secrets is just a temporary go-around. Views should be implemented for both safety and better handling. */
@ -39,13 +47,15 @@ router.get("/:user", route({ permission: "BAN_MEMBERS" }), async (req: Request,
const { guild_id } = req.params; const { guild_id } = req.params;
const user_id = req.params.ban; const user_id = req.params.ban;
let ban = await Ban.findOneOrFail({ guild_id: guild_id, user_id: user_id }); let ban = await Ban.findOneOrFail({ guild_id: guild_id, user_id: user_id }) as BanRegistrySchema;
if (ban.user_id === ban.executor_id) throw DiscordApiErrors.UNKNOWN_BAN; if (ban.user_id === ban.executor_id) throw DiscordApiErrors.UNKNOWN_BAN;
// pretend self-bans don't exist to prevent victim chasing // pretend self-bans don't exist to prevent victim chasing
/* Filter secret from registry. */ /* Filter secret from registry. */
ban = ban as BanModeratorSchema;
delete ban.ip delete ban.ip
return res.json(ban); return res.json(ban);
@ -126,7 +136,7 @@ router.delete("/:user_id", route({ permission: "BAN_MEMBERS" }), async (req: Req
if (ban.user_id === ban.executor_id) throw DiscordApiErrors.UNKNOWN_BAN; if (ban.user_id === ban.executor_id) throw DiscordApiErrors.UNKNOWN_BAN;
// make self-bans irreversible and hide them from view to avoid victim chasing // make self-bans irreversible and hide them from view to avoid victim chasing
const banned_user = await User.getPublicUser(banned_user_id); const banned_user = await User.getPublicUser(user_id);
await Promise.all([ await Promise.all([
Ban.delete({ Ban.delete({